Skip to main content
Press slash or control plus K to focus the search. Use the arrow keys to navigate results and press enter to open a threat.
Reconnecting to live updates…
EPSS 1.0%top 41%

Red Hat Security Advisory: Satellite 6.18.5 Async Update

0
High
Published: 05/07/2026 (05/07/2026, 17:09:35 UTC)
Source: GCVE Database
Vendor/Project: Red Hat Product Security
Product: Red Hat

Description

Red Hat Satellite is a system management solution that allows organizations to configure and maintain their systems without the necessity to provide public Internet access to their servers or other client systems. It performs provisioning and configuration management of predefined standard operating environments. Security Fix(es): * python3.12-django: Django: SQL Injection via crafted column aliases (CVE-2026-1287) * python3.12-django: Django: SQL Injection via RasterField band index parameter (CVE-2026-1207) * python3.12-django: Django: SQL injection via crafted column aliases in QuerySet.order_by() (CVE-2026-1312) * python3.12-django: Django: Denial of Service via crafted HTML inputs (CVE-2026-1285) * python3.12-django: Django: Denial of Service via crafted request with duplicate headers (CVE-2025-14550) * python3.12-markdown: markdown: Denial of Service via malformed HTML-like sequences (CVE-2025-69534) * python3.12-pyOpenSSL: pyOpenSSL: DTLS cookie callback buffer overflow (CVE-2026-27459) * rubygem-activesupport: Active Support: Denial of Service via large scientific notation strings (CVE-2026-33176)

Affected software

Affected versions
Red HatRed Hat Satellite 6Red Hat Satellite 6.18 for RHEL 9

AI-Powered Analysis

Machine-generated threat intelligence

AILast updated: 07/26/2026, 00:20:50 UTC

Technical Analysis

The advisory announces the general availability of the satellite/iop-advisor-backend-rhel9 container image for Red Hat Lightspeed in Satellite, which analyzes system health and configuration by applying predefined rules to local system data. The advisory references eight CVEs including CVE-2025-14550 and others, but does not detail the nature of these vulnerabilities or any remediation steps. The vendor advisory does not mention any fixes or patches being released alongside this container image. The product is not a cloud service, and no known exploits are reported in the wild. The advisory provides links to documentation for installing and configuring Red Hat Lightspeed in Satellite but does not specify affected versions or remediation status.

Potential Impact

The advisory indicates a high severity level but does not provide detailed impact information for the referenced CVEs. Since no known exploits are reported in the wild and no specific vulnerability details are provided, the exact impact on affected systems remains unclear. The tool analyzes local system data to generate recommendations without sending data externally, which may reduce exposure risk. However, the presence of multiple CVEs suggests potential security issues that could affect system health analysis or configuration integrity if exploited.

Mitigation Recommendations

The vendor advisory does not mention any patches or fixes currently available for the referenced vulnerabilities. It provides documentation for installing and configuring Red Hat Lightspeed in Satellite locally. Users should follow the official Red Hat Satellite documentation for installation and configuration guidance. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since this is not a cloud service, remediation depends on applying vendor updates when available.

Pro Console: star threats, build custom feeds, automate alerts via Slack, email & webhooks.Upgrade to Pro

Technical Details

Gcve Source
db.gcve.eu
Csaf Category
csaf_security_advisory
Csaf Version
2.0
Publisher
Red Hat Product Security
Advisory Id
RHSA-2026:14835
Cve Count
8
Additional Cves
["CVE-2025-69534","CVE-2026-1207","CVE-2026-1285","CVE-2026-1287","CVE-2026-1312","CVE-2026-27459","CVE-2026-33176"]
Cvss Version
null

Threat ID: 6a16097be29bf47b506476b7

Added to database: 05/26/2026, 20:58:35 UTC

Last enriched: 07/26/2026, 00:20:50 UTC

Last updated: 07/31/2026, 19:22:53 UTC

Views: 62

Community Reviews

0 reviews

Crowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.

Sort by
Loading community insights…

Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.

Need more coverage?

Upgrade to Pro Console for AI refresh and higher limits.

For incident response and remediation, OffSeq services can help resolve threats faster.

Latest Threats

Breach by OffSeqOFFSEQFRIENDS — 25% OFF

Check if your credentials are on the dark web

Instant breach scanning across billions of leaked records. Free tier available.

Scan now
OffSeq TrainingCredly Certified

Lead Pen Test Professional

Technical5-day eLearningPECB Accredited
View courses